Plugin icon

JWT Authentication for WP REST APIs

wp-rest-api-authentication

Vulnerabilities:

3

Last Updated:

October 9, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-14
Title
JWT Authentication for WP REST APIs < 4.8.0 - Unauthenticated Authentication Method Downgrade via 'mo_rest_api_test_config' Parameter
Fixed in
Fixed in 4.8.0
CVSS
5.3 (medium)
Published
2025-04-16
Title
WordPress REST API Authentication < 3.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Fixed in
Fixed in 3.6.4
CVSS
4.3 (medium)
Published
2022-11-09
Title
REST API Authentication < 2.4.1 - Settings Update via CSRF
Fixed in
Fixed in 2.4.1
CVSS
5.4 (medium)